[Git][security-tracker-team/security-tracker][master] Process some more NFUs

Tue Oct 6 21:20:53 BST 2026


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cb032c29 by Salvatore Bonaccorso at 2026-10-06T22:16:33+02:00
Process some more NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -912,55 +912,55 @@ CVE-2026-105918 (A vulnerability has been found in Kusalkasilva Learning-Managem
 CVE-2026-105879 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105868 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105867 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105866 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105865 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105864 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105863 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105862 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105861 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105860 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105859 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105858 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105857 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105856 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105855 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105854 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105853 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105852 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105851 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105850 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105849 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105848 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105847 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105846 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105845 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105844 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105842 (lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerabilit ...)
 	TODO: check
 CVE-2026-105841 (lrzsz before 0.13.0 contains an OS command injection vulnerability in  ...)
@@ -986,11 +986,11 @@ CVE-2026-105808 (A vulnerability was determined in SourceCodester Simple Student
 CVE-2026-105807 (A vulnerability was found in SourceCodester Simple Student Information ...)
 	NOT-FOR-US: SourceCodester
 CVE-2026-105806 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105805 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105804 (Payload is a free and open source headless content management system.  ...)
-	TODO: check
+	NOT-FOR-US: Payload CMS
 CVE-2026-105801 (openapi-python-client generates Python clients from OpenAPI documents. ...)
 	TODO: check
 CVE-2026-105800 (i18next-http-backend is a backend layer for i18next that loads transla ...)
@@ -1008,17 +1008,17 @@ CVE-2026-105795 (Kiota is an OpenAPI based HTTP Client code generator. From 1.25
 CVE-2026-105794 (MsQuic is a cross-platform C implementation of the IETF QUIC protocol  ...)
 	TODO: check
 CVE-2026-105793 (Microsoft UFO is an open-source framework for intelligent automation a ...)
-	TODO: check
+	NOT-FOR-US: Microsoft UFO
 CVE-2026-105792 (Microsoft UFO is an open-source framework for intelligent automation a ...)
-	TODO: check
+	NOT-FOR-US: Microsoft UFO
 CVE-2026-105791 (Microsoft UFO is an open-source framework for intelligent automation a ...)
-	TODO: check
+	NOT-FOR-US: Microsoft UFO
 CVE-2026-105790 (Microsoft UFO is an open-source framework for intelligent automation a ...)
-	TODO: check
+	NOT-FOR-US: Microsoft UFO
 CVE-2026-105789 (Microsoft UFO is an open-source framework for intelligent automation a ...)
-	TODO: check
+	NOT-FOR-US: Microsoft UFO
 CVE-2026-105788 (Microsoft UFO is an open-source framework for intelligent automation a ...)
-	TODO: check
+	NOT-FOR-US: Microsoft UFO
 CVE-2026-105488 (Missing authorization in the global vault in Devolutions Server 2026.3 ...)
 	NOT-FOR-US: Devolutions
 CVE-2026-105485 (Authentication bypass OAuth device authorization flow in Devolutions S ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb032c290120caa8c8b2b9ff3677d9b304377da1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cb032c290120caa8c8b2b9ff3677d9b304377da1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/89f31cef/attachment-0001.htm>
